Re: Does Firefox overwrite the master password on exiting to prevent a cold boot attack?

2013-12-16 Thread sworddragon2
> For example, your disk encryption keys are held decrypted in > memory, otherwise your computer would not be able to to read/write the > disk. I'm aware of this problem and have made some time ago a feature request for XScreenSaver to support clearing of such keys on screen locking (I also have

Re: Does Firefox overwrite the master password on exiting to prevent a cold boot attack?

2013-12-15 Thread sworddragon2
Thanks for the detailed answer. > 1. my disk encryption keys I'm on ecrypfs so this should be fine. > 2. my OS user account passphrase Luckily they are hashed on my Linux system. > 3. my SSH keys > 4. my GPG keys As they are normally in the home directory they are protected by ecryptfs. S

Does Firefox overwrite the master password on exiting to prevent a cold boot attack?

2013-12-10 Thread sworddragon2
Initially I have asked this question on support.mozilla.org but was forwarded to this place. Here is the original post: If on the current Firefox instance the master password was typed in does Firefox overwrite the related memory area on exiting? If not it would be maybe possible to do a cold b